Google Antigravity CLI 1.0.9

Changelog: Git submodule plugins, read-only permissions, and sandbox hardening

Automatic Git submodule resolution for plugins, read-only access for builtin skills, and sandbox path hardening.

Improvements(4)

• Added submodule support for plugins installation. External plugin installation now automatically resolves and initializes Git submodules.
• Optimized customizations permissions: Automatically grants read-only access to the builtin customizations directory, eliminating redundant permission prompts on startup.
• Improved glamour parser error handling (like nested checkboxes inside list emphasis) and preventing it from crashing the TUI, falling back to raw text with a warning banner.
• Updated bubbletea to v2.0.7: Resolves a potential TUI panic when terminal input is unavailable, fixes a data race in mouse handling within the Cursed Renderer, and corrects mouse release behavior under the Kitty Keyboard protocol.

Fixes(5)

• Hardened command execution permission checks by enforcing strict exact-match verification for PowerShell scripts, complex shell redirections ( > , 2>&1 ), and unparseable strings to prevent sandbox escapes.
• Hardened sandbox execution by adding .git to the core list of dangerous paths, preventing unauthorized or destructive repository modifications.
• Fixed a bug where allowlisted terminal commands with quoted arguments (for example, python -c "print(1)") would silently fail to match at runtime due to flawed whitespace tokenization.
• Fixed a bug in headless print mode resumption (--conversation/-c -p ...) where the CLI would dump the entire historical conversation transcript instead of only printing the newly generated response.
• Fixed a CPU compatibility issue on ARM64 devices without AES hardware support.

<h3 class="